Cardano Updates

fix: make Van Rossem hard fork ready

Address PR review (nemo83): a real .env shouldn't be in version control.
Rename .env -> .env.example, gitignore .env, and have the full-sync skill's
start-remote.sh create .env from .env.example on the remote when missing
(a fresh checkout no longer carries .env). The .claude skill folder stays —
it's the intentional QA-engineer full-sync harness.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

- golden-handles.txt: 25 commonly-known mainnet handles (cardano, hosky,
  minswap, bigpey, charles, ... incl. enterprise-address eth/satoshi/crypto),
  all verified present on mainnet. Names only — handles are transferable NFTs,
  so addresses are asserted by shape + round-trip, not pinned (drift-proof).
- run-golden-handles.sh: forward lookup (well-formed addr1.../stake1...) +
  reverse-by-payment-address round-trip for each golden handle.
- run-rest-spotchecks.sh: fix stdin/heredoc collision (data now passed via
  argv, not a pipe that the heredoc program shadowed) and switch the DB sampler
  to JSON output so arbitrary UTF-8 handle names parse safely; skip empty names.
- SKILL.md: document the golden step and files.

Validated live against the in-progress mainnet sync: golden 25/25, sample 10/10.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Adds a remote-driven QA harness to validate hard-fork (Van Rossem)
readiness end-to-end against mainnet, modelled on cf-token-metadata-registry:

- docker-compose.yml + .env: Postgres + API (built from source), syncing
  mainnet from the first ADA Handle mint (slot 47931310) to tip. DNS-TTL
  relay-wedge mitigation applied via JAVA_TOOL_OPTIONS (the image entrypoint
  is a fixed `java -jar`, so JAVA_OPTS would be ignored).
- .claude/skills/cf-adahandle-resolver-mainnet-integration-test-full-sync:
  SSH-driven skill (preflight -> prepare -> compose up -> tunnels -> monitor
  sync to tip -> parse-error scan -> REST round-trip spot-checks). Pass =
  full sync through Conway with zero genuine block-parse errors + DB-vs-API
  consistency on sampled handles.
- .gitignore: track .claude/, ignore skill runtime config (config.env,
  tunnels.pid) and settings.local.json.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Upgrade yaci-store starters 0.1.2 -> 0.1.7, the latest stable release in
the 0.1.x line (Van Rossem / protocol v11). yaci-core is left to resolve
transitively from the starter (0.3.10) rather than pinned explicitly, so
the project stays on the version combination the 0.1.x starters are built
and tested against.

cardano-client-lib follows transitively to 0.6.6. Bump project version to
0.1.5.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

feat: zpg deployment